mirrors/kube-prometheus
1
0
Fork 0
mirror of https://github.com/prometheus-operator/kube-prometheus.git synced 2025-10-30 15:41:02 +01:00
Code Issues Projects Releases Wiki Activity

Merge pull request #1647 from wulfthimm/wth/fix-node-exp

Browse Source 
Removed CAP_ from node-exporter daemonset
This commit is contained in:
Arthur Silva Sens 2022-02-16 14:53:11 +00:00 committed by GitHub
commit 3f1323dae8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
jsonnet/kube-prometheus/components/node-exporter.libsonnet
View File

@ -185,7 +185,7 @@ function(params) {
securityContext: {
allowPrivilegeEscalation: false,
readOnlyRootFilesystem: true,
capabilities: { drop: ['ALL'], add: ['CAP_SYS_TIME'] },
capabilities: { drop: ['ALL'], add: ['SYS_TIME'] },
},
};

2
manifests/nodeExporter-daemonset.yaml
View File

@ -48,7 +48,7 @@ spec:
allowPrivilegeEscalation: false
capabilities:
add:
- CAP_SYS_TIME
- SYS_TIME
drop:
- ALL
readOnlyRootFilesystem: true